For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CGI's avatar
CGI
Icon for Altostratus rankAltostratus
Oct 08, 2010

Modifying irule for geofiltering to include allowed ips

Hi iam new to both F5 and irules, and we are trying to achieve a modification of a exsisting irule that is used for geofiltering.   We would like to combine the possability to include certain ip ad...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 08, 2010
Nice work. You could move the client IP checking to CLIENT_ACCEPTED and set a variable to track whether the client is allowed or not. You could then reference that variable in HTTP_REQUEST to determine whether to allow the HTTP request or not. This would eliminate checking the client IP on every HTTP request on the same TCP connection for keep-alives.

 

 

Aaron